Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iH84gfuip-oJkoBXLSqRe4w72fs.roa
File: iH84gfuip-oJkoBXLSqRe4w72fs.roa (raw, json)
Hash identifier: 0F3AdIcGDvF7U/p2GCrPphAIqljYKXf8E0wJCdlWqMg=
Subject key identifier: 88:7F:38:81:FB:A2:A7:EA:09:92:80:57:2D:2A:91:7B:8C:3B:D9:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A3C074B9CD5ACE52451254E0F4982338
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iH84gfuip-oJkoBXLSqRe4w72fs.roa
Signing time: Mon 15 Aug 2022 23:04:35 +0000
ROA not before: Mon 15 Aug 2022 23:04:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:a3c0:7209/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a3:c0:74:b9:cd:5a:ce:52:45:12:54:e0:f4:98:23:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 23:04:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=887f3881fba2a7ea099280572d2a917b8c3bd9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:17:08:46:b6:59:a6:c3:c7:89:9f:85:2a:
82:7a:37:74:80:83:b7:c6:d5:48:dc:af:7e:6a:22:
05:c7:84:59:21:94:47:70:ec:79:70:44:d3:b8:40:
87:bf:2c:73:5d:33:87:bc:39:0d:ce:3e:59:8c:fd:
ab:ab:a2:12:d3:25:3f:17:d1:7a:71:7d:07:4a:ae:
8d:fd:76:5e:64:ee:3c:a6:7b:48:58:f3:5a:6b:2b:
07:35:c9:0c:52:9e:a6:09:05:f3:4c:98:21:4f:2b:
e3:8e:73:2a:f5:8a:a1:c2:70:2d:82:a2:04:f6:58:
a7:5e:d5:5c:83:76:bb:08:c4:aa:f5:0e:2d:92:a7:
4d:42:04:e6:8e:49:96:af:15:5d:05:9b:8b:b6:38:
d3:a2:65:a3:1f:96:c9:e3:8e:7a:e0:c8:45:a1:3b:
18:52:78:3b:ac:95:41:95:23:fa:93:43:62:9c:a5:
9c:a0:08:58:d3:62:ea:54:54:ce:47:04:ff:e8:f6:
6a:42:24:1a:6b:f1:d7:c2:11:15:37:76:d3:f6:1a:
71:01:7c:85:9a:28:45:1b:d6:aa:39:cb:54:ae:70:
b0:2d:4a:80:54:2a:90:c4:3e:d7:ce:77:69:cb:2b:
19:a1:ac:b0:c6:da:e6:19:ba:93:01:54:3b:04:8b:
04:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7F:38:81:FB:A2:A7:EA:09:92:80:57:2D:2A:91:7B:8C:3B:D9:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/iH84gfuip-oJkoBXLSqRe4w72fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:65:5f:08:43:30:fd:9f:54:ac:a7:65:09:46:80:5c:c4:f6:
c9:ed:78:08:6d:33:de:f0:2a:b0:ed:05:03:09:dd:0d:43:11:
52:3e:31:ba:b8:5b:3d:2f:3a:5b:3c:36:7b:7c:aa:ea:77:6e:
9f:ac:90:bb:71:dd:5c:3a:78:1e:13:a6:83:e2:a5:da:fe:da:
83:36:80:78:eb:78:bb:21:8d:c9:30:07:e8:01:47:8d:76:39:
0d:f6:a4:03:dd:d8:be:55:73:ef:61:84:52:68:35:63:0c:46:
ae:e4:e8:25:a7:85:2d:51:62:6d:c7:bb:d0:92:55:3f:84:4f:
f4:aa:b7:40:88:3d:2b:b9:4a:76:30:21:4b:10:da:17:93:41:
19:10:e5:4d:38:2a:e4:53:99:de:06:8d:97:3c:ed:c2:21:ed:
bb:c2:f2:a2:6b:08:52:4c:d6:9a:e9:18:83:17:4e:66:1a:cc:
9d:6d:df:ec:c1:e6:f1:b4:f5:da:10:a2:c3:28:f1:08:10:3d:
30:59:4d:3a:d8:88:b2:89:01:ce:ea:77:0b:a4:1b:60:00:9b:
79:91:42:9e:96:ee:5a:5f:35:2a:52:bc:80:a5:e6:3c:77:a4:
92:7a:1d:92:ea:2d:5d:74:d7:74:c0:91:03:9e:c6:78:3c:50:
18:6e:a6:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKjwHS5zVrOUkUSVOD0mCM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE1MjMwNDM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODdmMzg4MWZiYTJhN2VhMDk5MjgwNTcyZDJhOTE3YjhjM2JkOWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU0XCEa2WabDx4mfhSqCejd0gIO3
xtVI3K9+aiIFx4RZIZRHcOx5cETTuECHvyxzXTOHvDkNzj5ZjP2rq6IS0yU/F9F6
cX0HSq6N/XZeZO48pntIWPNaaysHNckMUp6mCQXzTJghTyvjjnMq9YqhwnAtgqIE
9linXtVcg3a7CMSq9Q4tkqdNQgTmjkmWrxVdBZuLtjjTomWjH5bJ44564MhFoTsY
Ung7rJVBlSP6k0NinKWcoAhY02LqVFTORwT/6PZqQiQaa/HXwhEVN3bT9hpxAXyF
mihFG9aqOctUrnCwLUqAVCqQxD7XzndpyysZoaywxtrmGbqTAVQ7BIsE/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIh/OIH7oqfqCZKAVy0qkXuMO9n7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaUg4NGdmdWlwLW9Ka29CWExTcVJlNHc3MmZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAABlXwhDMP2fVKynZQlG
gFzE9snteAhtM97wKrDtBQMJ3Q1DEVI+Mbq4Wz0vOls8Nnt8qup3bp+skLtx3Vw6
eB4TpoPipdr+2oM2gHjreLshjckwB+gBR412OQ32pAPd2L5Vc+9hhFJoNWMMRq7k
6CWnhS1RYm3Hu9CSVT+ET/Sqt0CIPSu5SnYwIUsQ2heTQRkQ5U04KuRTmd4GjZc8
7cIh7bvC8qJrCFJM1prpGIMXTmYazJ1t3+zB5vG09doQosMo8QgQPTBZTTrYiLKJ
Ac7qdwukG2AAm3mRQp6W7lpfNSpSvICl5jx3pJJ6HZLqLV1013TAkQOexng8UBhu
phk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:20 2025 by rpki-client